From 5775082d4c034dbff101b32a8a0ef860cd24ec34 Mon Sep 17 00:00:00 2001
From: Stefan Esser
Date: Wed, 12 Feb 2014 19:31:03 +0100
Subject: Only remove whitespace for COOKIE

---
 treat_data.c | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

(limited to 'treat_data.c')

diff --git a/treat_data.c b/treat_data.c
index 9f80cb2..15e721d 100644
--- a/treat_data.c
+++ b/treat_data.c
@@ -139,9 +139,13 @@ SAPI_TREAT_DATA_FUNC(suhosin_treat_data)
 	var = php_strtok_r(res, separator, &strtok_buf);
 	
 	while (var) {
-		/* Overjump plain whitespace */
-		while (*var && *var == ' ') var++;
-
+		
+		if (arg == PARSE_COOKIE) {
+			/* Remove leading spaces from cookie names, needed for multi-cookie header where ; can be followed by a space */
+			while (isspace(*var)) {
+				var++;
+			}
+		}
 		val = strchr(var, '=');
 		
 #if PHP_VERSION_ID >= 50311
-- 
cgit v1.3